Skip to main content

Module syscalls

Module syscalls 

Source
Expand description

Linux syscall table integrity checker.

Reads the sys_call_table kernel symbol and checks each handler address against the kernel text region (_stext.._etext). Entries pointing outside this range are flagged as potentially hooked.

Functionsยง

check_syscall_table
Check the syscall table for hooks.